Zip Slip Vulnerability in SMA1000 Appliance Management Console by SonicWall
CVE-2026-102257

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Sma1000
Vendor
CVE Published:
7 October 2026

What is CVE-2026-102257?

The SMA1000 Appliance Management Console contains a Zip Slip vulnerability that allows attackers to exploit the system by using a specially crafted archive. This vulnerability enables the extraction of files outside the intended destination directory, potentially leading to remote code execution. Proper security measures and updates are essential to mitigate this risk.

Affected Version(s)

SMA1000 Linux 12.4.3-03526 (platform-hotfix) and older versions

SMA1000 Linux 12.5.0-02952 (platform-hotfix) and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Mariani
.